heidisql-wine

LOW
maintainer D3SOX 1 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The package downloads a portable Windows executable from the project's official domain (heidisql.com) for use with Wine; this is a legitimate source for the software, and the file is not executed directly on the host system.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a portable Windows executable from the project's official domain (heidisql.com) for use with Wine; this is a legitimate source for the software, and the file is not executed directly on the host system.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 "https://www.heidisql.com/builds/heidisql64.r${heidisqlrelease}.exe"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Nico <d3sox at protonmail dot com>
2# Contributor: Liviu Cristian Mirea-Ghiban <liviu dot mirea at wecodepixels dot com>
3heidisqlrelease=7320
4shortpkgver=12.20
5pkgname=heidisql-wine
6pkgver=${shortpkgver}.0.${heidisqlrelease}
7pkgrel=2
8pkgdesc="A lightweight GUI for managing MySQL, PostgreSQL, and Microsoft SQL databases. This package uses the latest nightly build (64bit) on top of the portable version, and uses Wine."
9arch=(any)
10url="http://www.heidisql.com/"
11license=('GPL')
12depends=(bash wine)
13makedepends=(unzip)
14source=("https://github.com/HeidiSQL/HeidiSQL/releases/download/v${shortpkgver}/HeidiSQL_${shortpkgver}_64_Portable.zip"
15 "https://www.heidisql.com/builds/heidisql64.r${heidisqlrelease}.exe"
16 "${pkgname}.png"
17 "${pkgname}.desktop"
18 "${pkgname}.sh")
19sha256sums=('d84742736e4508c206c28c58018bbd934319c941dc9d68ff4673737a3f4df731'
20 '2c1e8231f681a3a75f3fda65e679d86c0fa9a35294fa2c33f3e57f0dc3cacc82'
21 'd0f6c19b7aa4b7a6daa00b658a852f97d35dd98d2c31a2f4ea267527bf5cda15'
22 '07abdaeab2b5c30ed7b053cce5e42942cc32c56503439eff69fb21b57c522122'
23 '840acb31ca1de8d029e725fded1ac09df0314dea41da53f15f4cd3848e34bb00')
24noextract=("HeidiSQL_${shortpkgver}_64_Portable.zip")
25
26
27package() {
28 # Unzip files from the .zip file
29 install -d -m755 ${pkgdir}/usr/share/$pkgname
30 unzip "$srcdir/HeidiSQL_${shortpkgver}_64_Portable.zip" -d "$srcdir/unzipped"
31
32 # Overwrite with nightly build file
33 cp "$srcdir/heidisql64.r${heidisqlrelease}.exe" "$srcdir/unzipped/heidisql.exe"
34
35 # Install files
36 cp -ra "$srcdir/unzipped/"* "${pkgdir}/usr/share/${pkgname}"
37
38 # Set proper permissions
39 find "${pkgdir}/usr/share/${pkgname}" -type f -exec chmod 644 "{}" \;
40 find "${pkgdir}/usr/share/${pkgname}" -type d -exec chmod 755 "{}" \;
41
42 # Install the startup script
43 install -Dm755 "${srcdir}/${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
44
45 # Install the icon
46 install -Dm644 "${srcdir}/${pkgname}.png" "${pkgdir}/usr/share/pixmaps/${pkgname}.png"
47
48 # Install the .desktop
49 install -Dm644 "${srcdir}/${pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
50}
51

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion